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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 
A request for continued examination under 37 CFR 1.1 14, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 1 1/20/2006 has been entered. 

Response to Amendment 
Claims 5 and 7 have been cancelled. Applicant's arguments/amendments with respect to 
amended claims 1 and 8 and previously presented claims 2-4, 6, & 9-39 filed 1 1/20/2006 have 
been fully considered and therefore the claims are rejected under new grounds. 

Claim Rejections - 35 USC §102 

I. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

II. Claims 8-9 are rejected under 35 U.S.C. 102(e) as being fully anticipated by Chan, US 
Patent No. 6,473,860. 

As per claim 8: 
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Chan teaches a system for secure on-line mass distribution of data products to end users 
comprising: an authorization server at a first location having associated therewith copies of first 
portions of a plurality of data products, wherein said first portions of the data products do not 
include information to enable encrypted data to be decrypted (col. 1 1, lines 1 1-13); a plurality of 
data distribution terminals at a plurality of locations different from said first location, each of 
said data distribution terminals has stored thereon copies of second portions of said plurality of 
data products (col. 10, line 52 - col. 11, line 4); a communications system that provides for 
exchange of data between the entity and said plurality of data distribution terminals (col. 11, 
lines 7-9), and a data distribution program that provides copies of said data products to those end 
users who are entitled to have said copies thereof (col. 11, lines 7-11); wherein said data 
distribution program provides a copy of a data product by combining a copy of the first portion 
of said data product obtained from said authorization server with a copy of the second portion of 
said data product obtained from one of said plurality of data distribution terminals, wherein said 
step of combining is performed at a location of said one of said plurality of data distribution 
terminals and said end user is located at said location of said one of said plurality of data 
distribution terminals (col. 11, lines 39-45) . 
As per claim 9: 

Chan teaches the system, as applied to claim 8 above. Furthermore, Chan teaches 
wherein said authorization server also has associated therewith an authorization database 
containing data indicating entitlement by said end users to copies of said data products (col. 10, 
lines 24-45). 
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Claim Rejections - 35 USC § 103 

III. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

IV. Claims 1, 3-4, and 6 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chan, US Patent No. 6,473,860 and further in view of McMullan Jr. et al., US Patent No. 
5,654746. 

As per claim 1 : 

Chan substantially teaches a method for on-line mass distribution of data products to end 
users, the method comprising: maintaining a first portion of each of said data products at a first 
location (col. 10, lines 52-67 and col. 11, lines 9-11), maintaining an unencrypted second portion 
of each of said data products at a second location, wherein the second location is different from 
said first location (col. 10, lines 52-67 and col. 11, lines 1-2); for each of said end users, 
confirming the end user's entitlement to one of said data products (col. 1 1 , lines 11-13); 
obtaining an unencrypted second portion of said one of said data products from said second 
location (col. 11, lines 1-5); after said step of confirming, obtaining an encrypted first portion of 
said one of said data products at said second location from said first location, obtaining a 
decryption key and using said decryption key to decrypt said encrypted first portion (col. 1 1, 
lines 9-20); combining said decrypted first portion of said one of said data products and said 
unencrypted second portion of said one of said data products, wherein said step of combining is 
performed at said second location, wherein said end user is located at said second location (col. 
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1 1, lines 39-45), and providing said combined first portion and second portion to said user, 
wherein the first portion of said data product comprises critical data that enables a program 
executed on a computing platform to use said data product including both the first portion and 
the second portion together for an intended purpose (col. 1 1, lines 39-45). 

Not explicitly disclosed is wherein the first portion is stored/maintained in an encrypted 
form on the central server. However, McMullan Jr. et al. teach control information of digital 
data is maintained in encrypted form at a server archive in order maintain the data's 
confidentiality. Furthermore, storing/maintaining critical data in an encrypted form is and has 
been very well known in the art for quite some time now. Therefore, it would have been obvious 
to a person in the art at the time the invention was made to modify the method disclosed in Chan 
to maintain/store the first portion of data at the first location in encrypted form as well. This 
modification would have been obvious because a person having ordinary skill in the art, at the 
time the invention was made, would have been motivated to do so since McMullan Jr. et al. 
suggest that it is well known to protect data that is stored by encrypting the data before storing in 
col. 2, lines 8-18 and col. 8, lines 26-40. 
As per claim 3: 

Chan and McMullan Jr. et al. substantially teach the method of claim 1 . Furthermore, 
Chan teaches wherein said data products include digital copies of movies (col. 10, lines 52-55). 
As per claim 4: 

Chan and McMullan Jr. et al. substantially teach the method of claim 1 . Furthermore, 
McMullan Jr. et al. teach wherein said data products include digital copies of musical songs (col. 
3, lines 49-58). 



t 
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As per claim 6: 

Chan and McMullan Jr. et al. substantially teach the method, as applied to claim 1 above. 
Chan teaches the method further comprising the step of prior to the step of combining, 
encrypting said first portion of one of said data products (col. 4, lines 25-33). 

V. Claim 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over Chan, US Patent 
No. 6,473,860 and McMullan Jr. et al., US Patent No. 5,654746 as applied to claim 1 above, and 
further in view of Porter et al., United States Patent No. 5,845,067 

As per claim 2: 

Chan and McMullan Jr. et al. substantially teach the method, as applied to claim 1 above. 
Not explicitly disclosed is the method, wherein said data products include geographic databases. 
However, Porter et al. teaches that a document can be any information stored as files in a file 
system, which can equate to the information contained by a geographic database. Therefore, it 
would have been obvious to a person in the art at the time the invention was made to modify the 
method disclosed in Chan et al. for the data product to include files of geographical information 
stored in a. file system, which is equivalent to a database. This modification would have been 
obvious because a person having ordinary skill in the art, at the time the invention was made, 
would have been motivated to do so since it is suggested by Porter et al. in col. 7, lines 26-32. 

VI. Claims 10-22, and 24-38 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chan, US Patent No. 6,473,860 and further in view of Ginter et al., United States Patent No. 
6,237,786. 

As per claims 10 and 24: 
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Chan substantially teaches a system/method comprising, in combination: a first entity 
maintaining the first portion of the data product at a first location (col. 10, lines 52-67); a second 
entity maintaining the second portion of the data product at a second location different from said 
first location (col. 1 1, lines 1 1-15); a first set of logic executable by the first entity to encrypt the 
first portion so as to produce an encrypted first portion that can be decrypted using a first 
decryption key, wherein the first entity sends the encrypted first portion via a 
telecommunications link to the second entity (col. 11, lines 9-20); a second set of logic 
executable by the second entity, upon receipt of the encrypted first portion, to record onto the 
storage medium the encrypted first portion and the second portion wherein an end user of the 
data product is location at said second location where the encrypted first potion and the second 
portion are recorded onto the storage medium (col. 1 1, lines 1 1-20); and wherein the first portion 
of said data product comprises critical data that enables a program executed on a computing 
platform to use said data product including both the first portion and the second portion together 
for an intended purpose (col. 1 1, lines 39-45). 

Not explicitly disclosed is the third entity gaining access to the first decryption key in 
order to access the data product. However, Ginter et al. teach that in order for a third party, or 
any party for that matter, to gain access to the data product they must first have the appropriate 
decryption key. Therefore, it would have been obvious to a person in the art at the time the 
invention was made to modify the method disclosed in Chan for a third entity to gain access to 
the first decryption key in order to access the data product. This modification would have been 
obvious because a person having ordinary skill in the art, at the time the invention was made, 
would have been motivated to do so since it is suggested by Ginter et al. in col. 131, lines 18-44. 
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As per claims 1 1 and 25: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 10 and 

24. Furthermore, Ginter et al. teach the method/system wherein the first entity sends to the 
second entity, together with the encrypted first portion, an encrypted authorization key that can 
be decrypted using a second decryption key so as to reveal verification information indicative of 
an entity authorized to access the data product, and wherein the second set of logic is further 
executable to record onto the storage medium the encrypted authorization key (col. 14, lines 21- 
43 and col. 22, lines 13-45). 

As per claims 12 and 26: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 1 1 and 

25. Furthermore, Ginter et al. teach the method/system wherein the second decryption key is 
derived as a function of an environmental parameter (col. 22, lines 13-45). 

As per claims 13 and 27: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 12 and 

26. Furthermore, Ginter et al. teach the method/system wherein the environmental parameter 
comprises an identification code associated with the entity authorized to access the data product 
(col. 22, lines 13-45). 

As per claims 14 and 28: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 1 1 and 

27. Furthermore, Ginter et al. teach the method/system wherein the third entity generating the 
second decryption key as the function of the identification code; the third entity using the second 
decryption key to decrypt the encrypted authorization key and to thereby gain access to the 
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verification information; and the third entity using the verification information to validate storage 
of the data product (col. 1 3 1 5 lines 1 8-44). 
As per claims 15 and 29: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 1 1 and 
25. Furthermore, Ginter et al. teach the method/system wherein a third set of logic executable by 
a third entity to decrypt the encrypted authorization information, to thereby gain access to 
verification information, and to compare at least a portion of the verification information to 
predetermined information associated with the third entity so as to determine whether the third 
entity is authorized to gain access to the data product (col. 131, lines 18-67). 
As per claims 16 and 3 1 : 

Chan and Ginter et al. substantially teach the method/system as applied to claims 15 and 
30. Furthermore, Ginter et al. teach the method/system wherein the predetermined information 
associated with the third entity comprises an identification code (col. 131, lines 40-44). 
As per claims 17 and 30: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 10 and 
29. Furthermore, Ginter et al. teach the method/system wherein the first entity sends to the 
second entity, together with the encrypted first portion, an encrypted authorization key that can 
be decrypted using a second decryption key so as to reveal verification information indicative of 
an entity authorized to access the data product (col. 14, lines 21-43 and col. 22, lines 13-45). 
As per claims 1 8 and 33 : 
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Chan and Ginter et al. substantially teach the method/system as applied to claims 17 and 

32. Furthermore, Ginter et al. teach the method/system wherein the second decryption key is 
derived as a function of an environmental parameter (col. 22, lines 13-25). 

As per claims 19 and 34: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 1 8 and 

33. Furthermore, Ginter et al. teach the method/system wherein the environmental parameter 
comprises an identification code associated with the entity authorized to store the data product 
(col 22, lines 13-25). 

As per claims 20 and 35: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 1 1 and 

34. Furthermore, Ginter et al. teach the method/system wherein the third entity generating the 
second decryption key as the function of the identification code; the third entity using the second 
decryption key to decrypt the encrypted authorization key and to thereby gain access to the 
verification information; and the third entity using the verification information to validate storage 
of the data product (col. 104, line 25 - col. 106, line 15). 

As per claims 21 and 37: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 1 1 and 
36. Furthermore, Ginter et al. teach the method/system wherein a third set of logic executable by 
a third entity to decrypt the encrypted authorization information, to thereby gain access to 
verification information, and to compare at least a portion of the verification information to 
predetermined information associated with the storage medium so as to determine whether the 
storage medium is authorized to gain access to store the data product (col. 78, lines 8-58). 
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As per claims 22 and 38: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 21 and 
37. Furthermore, Ginter et al. teach the method/system wherein the predetermined information 
associated with the storage medium comprises and identification code (col. 22, lines 13-45). 
As per claim 32: 

Chan and Ginter et al. substantially teach the method as applied to claim 24. 
Furthermore, Ginter et al. teach the method further comprising sending to the second entity, 
together with the encrypted first portion, an encrypted authorization key that can be decrypted 
using a second decryption key so as to reveal verification information indicative of an entity 
authorized to store the data product (col. 14, lines 21-43 and col. 22, lines 13-45). 
As per claim 36: 

Chan and Ginter et al. substantially teach the method as applied to claim 32. 
Furthermore, Ginter et al. teach the method further comprising the third entity using the second 
decryption key to decrypt the encrypted authorization key and to thereby gain access to the 
verification information; and the third entity using the verification information tot validate 
storage of the data product (col. 104, line 25 - col. 106, line 15). 

VII. Claims 23 and 39 are rejected under 35 U.S.C. 103(a) as being unpatentable over Chan, 
US Patent No. 6,473,860 and Ginter et al., United States Patent No. 6,237,786 as applied to 
claims 10 and 24 above, and further in view of Ahrens et al., United States Patent No. 5,951,620. 
As per claims 23 and 39: 

Chan and Ginter et al. substantially teach the method/system as applied to claims 10 and 
24. Not explicitly disclosed is the method/system wherein the third entity comprises a 
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navigation system. However, Ahrens et al. teach the use of a navigation system. Therefore, it 
would have been obvious to a person in the art at the time the invention was made to modify the 
method disclosed in Chan for the third entity to be a navigation system. This modification would 
have been obvious because a person having ordinary skill in the art, at the time the invention was 
made, would have been motivated to do so since it is suggested by Ahrens et al. in col. 7, lines 
29-44. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Nadia Khoshnoodi whose telephone number is (571) 272-3825. 
The examiner can normally be reached on M-F: 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR/ Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Nadia Khoshnoodi 
Examiner 
Art Unit 2137 
2/16/2007 
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